This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/276AF720D4EE11F09328C93FC4F9AE02.roa
File: 276AF720D4EE11F09328C93FC4F9AE02.roa (raw, json)
Hash identifier: JplNXQO2Wx5ZVsUnY8QzEKP+B0R8iAE4R1iut1PwRdE=
Subject key identifier: AD:83:9D:87:4D:5D:32:C3:7D:7C:75:A1:A0:C4:F3:A8:79:9C:C1:6A
Certificate issuer: /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Certificate serial: 03
Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/276AF720D4EE11F09328C93FC4F9AE02.roa
Signing time: Tue 09 Dec 2025 10:59:38 +0000
ROA not before: Tue 09 Dec 2025 10:59:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154257
IP address blocks: 155.35.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Validity
Not Before: Dec 9 10:59:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69380119-c8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:a1:7d:c2:72:a8:3d:17:40:ad:9f:ab:2a:
94:f6:e7:01:77:1a:bb:61:cf:ba:a1:85:73:ae:30:
9f:1c:21:34:ee:65:82:8f:e5:26:ba:6d:df:ac:39:
e2:56:bc:e0:c1:cb:f4:95:52:e0:9e:63:af:4e:6a:
0d:f0:fa:f6:c7:75:04:1f:f2:00:6c:1d:98:7b:bc:
bd:10:b2:63:d0:69:bc:4c:7f:0b:00:cc:f6:d5:5a:
00:70:35:07:58:bb:0c:1c:62:25:86:e7:df:82:f2:
a7:51:b5:d4:e0:60:2f:9e:80:d0:cb:fc:ef:c2:b2:
7e:55:37:82:55:fc:2e:8c:ee:93:29:0e:f4:b9:c1:
2d:4b:24:e6:0e:d0:dc:99:08:1f:18:1b:95:83:a9:
1d:c3:df:3c:8d:c4:4a:a3:46:ae:03:64:5c:9f:c8:
7c:30:b9:31:a4:2e:01:66:0f:3a:9a:e8:64:56:fd:
6f:4c:57:f8:f3:d5:d7:27:16:7b:99:09:25:a8:38:
aa:6c:98:6a:20:c8:db:c8:ba:d1:e3:7b:48:c5:25:
a1:f6:fb:11:d9:f6:1c:c6:d9:28:e8:3c:18:b5:a5:
c7:e9:f1:e9:d2:70:3c:fa:ea:15:ec:03:70:ca:03:
8b:66:52:74:4e:c5:96:cb:27:0e:09:9f:54:15:95:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:83:9D:87:4D:5D:32:C3:7D:7C:75:A1:A0:C4:F3:A8:79:9C:C1:6A
X509v3 Authority Key Identifier:
keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/276AF720D4EE11F09328C93FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.35.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:35:ca:77:09:71:1b:5d:ec:bb:cd:84:0d:c4:b9:03:b4:60:
87:4c:14:3b:24:a7:88:60:de:87:d3:08:2a:70:94:96:92:ee:
36:13:66:d0:07:d8:63:dd:00:66:23:fa:ce:0d:ad:25:31:ae:
7b:ec:68:17:c2:16:ba:82:71:96:d8:f8:e2:da:2b:bb:9a:0a:
34:1a:91:23:87:59:26:68:86:3e:d0:10:d1:3c:3c:85:00:ea:
c5:8d:dc:26:34:76:26:1a:0a:a7:36:1d:51:a4:a5:17:f7:5f:
45:f5:c4:8f:be:d0:a9:c7:f8:03:e4:88:ca:4c:b8:0f:40:7b:
2d:de:25:e1:09:e4:4e:3d:62:35:e4:da:2d:e7:64:a3:ac:b2:
69:8e:c8:8f:0b:54:71:1b:dd:91:0b:cc:1a:36:2b:2d:77:67:
55:d7:0e:de:80:9e:6e:55:0d:b9:b0:25:e2:cd:88:93:54:52:
27:d2:14:6c:19:98:64:58:73:f6:0f:1c:37:01:d5:a7:16:27:
2a:13:fa:06:7f:13:5d:d3:34:46:d9:78:fa:65:c5:cd:9c:fc:
13:65:f3:fb:87:6e:17:97:b5:27:e8:46:90:e9:27:45:fa:69:
cd:31:a6:6c:58:e5:9f:35:e2:f0:0d:3d:3d:08:c3:c5:0d:89:
e0:5f:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:20:50 2025 by rpki-client